允许ip段进行端口访问
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="*.*.*.0/24" port protocol="tcp" port="8080" accept"
允许ip段进行端口转发
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="*.*.*.0/24" forward-port port="80" protocol="tcp" to-port="8080" "
取消原本的端口转发规则
firewall-cmd --permanent --remove-forward-port=port=80:proto=tcp:toport=8080
取消80端口的开放
firewall-cmd --zone=public --remove-port=80/tcp --permanent
配置装载
firewall-cmd --reload
重启防火墙
systemctl restart firewalld.service
查看复杂规则
firewall-cmd --list-rich-rules